CVE-2017-1000489

Mautic versions 2.0.0 - 2.11.0 with a SSO plugin installed could allow a disabled user to still login using email address

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

Name	Vendor	Start Version	End Version
Mautic	Acquia	2.0.0 (including)	2.0.0 (including)
Mautic	Acquia	2.0.1 (including)	2.0.1 (including)
Mautic	Acquia	2.1.0 (including)	2.1.0 (including)
Mautic	Acquia	2.1.1 (including)	2.1.1 (including)
Mautic	Acquia	2.2.0 (including)	2.2.0 (including)
Mautic	Acquia	2.2.1 (including)	2.2.1 (including)
Mautic	Acquia	2.3.0 (including)	2.3.0 (including)
Mautic	Acquia	2.4.0 (including)	2.4.0 (including)
Mautic	Acquia	2.5.0 (including)	2.5.0 (including)
Mautic	Acquia	2.5.1 (including)	2.5.1 (including)
Mautic	Acquia	2.6.0 (including)	2.6.0 (including)
Mautic	Acquia	2.6.1 (including)	2.6.1 (including)
Mautic	Acquia	2.7.0 (including)	2.7.0 (including)
Mautic	Acquia	2.7.1 (including)	2.7.1 (including)
Mautic	Acquia	2.8.0 (including)	2.8.0 (including)
Mautic	Acquia	2.8.1 (including)	2.8.1 (including)
Mautic	Acquia	2.8.2 (including)	2.8.2 (including)
Mautic	Acquia	2.9.0-beta (including)	2.9.0-beta (including)
Mautic	Acquia	2.9.1 (including)	2.9.1 (including)
Mautic	Acquia	2.10.0-beta (including)	2.10.0-beta (including)
Mautic	Acquia	2.10.1 (including)	2.10.1 (including)
Mautic	Acquia	2.11.0-beta (including)	2.11.0-beta (including)
Mautic	Mautic	2.9.0 (including)	2.9.0 (including)
Mautic	Mautic	2.9.2 (including)	2.9.2 (including)
Mautic	Mautic	2.10.0 (including)	2.10.0 (including)
Mautic	Mautic	2.11.0 (including)	2.11.0 (including)

NVD	https://nvd.nist.gov/vuln/detail/CVE-2017-1000489
CWE	https://cwe.mitre.org/data/definitions/287.html

Improper Authentication